From 2db7360c8bc08de0da1d632bf3c30372e65ca960 Mon Sep 17 00:00:00 2001
From: Esdras Renan <monkeyesdras@gmail.com>
Date: Thu, 9 Oct 2025 18:47:13 -0300
Subject: [PATCH] =?UTF-8?q?ci(convex):=20corrigir=20'secrets'=20em=20if=20?=
 =?UTF-8?q?de=20job=20e=20usar=20step-if=20com=20env\n\n-=20Job=20roda=20e?=
 =?UTF-8?q?m=20push=20main=20/=20workflow=5Fdispatch=20/=20mudan=C3=A7as?=
 =?UTF-8?q?=20em=20convex/**.\n-=20Step=20de=20deploy=20s=C3=B3=20executa?=
 =?UTF-8?q?=20se=20os=20secrets=20estiverem=20definidos.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/ci-cd-web-desktop.yml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/ci-cd-web-desktop.yml b/.github/workflows/ci-cd-web-desktop.yml
index 2e05b52..2875928 100644
--- a/.github/workflows/ci-cd-web-desktop.yml
+++ b/.github/workflows/ci-cd-web-desktop.yml
@@ -187,11 +187,8 @@ jobs:
   convex_deploy:
     name: Deploy Convex functions
     needs: changes
-    # Executa quando:
-    # - Disparo manual (workflow_dispatch) — sem exigir input
-    # - Push na main com secrets presentes (deploy automático)
-    # - Ou quando houver mudanças em convex/** detectadas pelo filtro
-    if: ${{ github.event_name == 'workflow_dispatch' || (github.ref == 'refs/heads/main' && secrets.CONVEX_SELF_HOSTED_URL != '' && secrets.CONVEX_SELF_HOSTED_ADMIN_KEY != '') || needs.changes.outputs.convex == 'true' }}
+    # Executa em workflow_dispatch, push na main, ou quando convex/** mudar
+    if: ${{ github.event_name == 'workflow_dispatch' || github.ref == 'refs/heads/main' || needs.changes.outputs.convex == 'true' }}
     runs-on: [ self-hosted, linux, vps ]
     env:
       APP_DIR: /srv/apps/sistema
@@ -235,12 +232,16 @@ jobs:
             $EXCLUDE_ENV \
             ./ "$EFFECTIVE_APP_DIR"/
       - name: Deploy functions to Convex self-hosted
+        if: ${{ env.CONVEX_SELF_HOSTED_URL != '' && env.CONVEX_SELF_HOSTED_ADMIN_KEY != '' }}
+        env:
+          CONVEX_SELF_HOSTED_URL: ${{ secrets.CONVEX_SELF_HOSTED_URL }}
+          CONVEX_SELF_HOSTED_ADMIN_KEY: ${{ secrets.CONVEX_SELF_HOSTED_ADMIN_KEY }}
         run: |
           docker run --rm -i \
             -v "$EFFECTIVE_APP_DIR":/app \
             -w /app \
-            -e CONVEX_SELF_HOSTED_URL="${{ secrets.CONVEX_SELF_HOSTED_URL }}" \
-            -e CONVEX_SELF_HOSTED_ADMIN_KEY="${{ secrets.CONVEX_SELF_HOSTED_ADMIN_KEY }}" \
+            -e CONVEX_SELF_HOSTED_URL \
+            -e CONVEX_SELF_HOSTED_ADMIN_KEY \
             node:20-bullseye bash -lc "corepack enable && corepack prepare pnpm@9 --activate && pnpm install --frozen-lockfile --prod=false && pnpm exec convex deploy"
 
   desktop_release: